
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json)
Hash identifier: wpxsTrlYKgWPtQJ9D1vxxhMB+aOobjhRrx4EiivCMf4=
Subject key identifier: 5E:59:D4:3A:8E:95:32:FE:39:08:3B:9F:C5:7C:40:3A:1A:61:95:D0
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial: 0726
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
Manifest number: 0714
Signing time: Thu 16 Apr 2026 21:52:04 +0000
Manifest this update: Thu 16 Apr 2026 21:52:03 +0000
Manifest next update: Thu 23 Apr 2026 21:52:03 +0000
Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: Jc9FixYOMUgAZwXzWpUxG/jEpenEb+OgH/DJrpgkb5Q=)
2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: rQHi52MocQB/prtSJtGO8uedEqwHLU7/+mRUSwiw+1Y=)
3: 88A31320809211EB938F4016C4F9AE02.roa (hash: hQTt0AFzBYtxdeGsE5h3TYl3htX01dC5soXQmdrd9Fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830 (0x726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Validity
Not Before: Apr 16 21:52:03 2026 GMT
Not After : Apr 23 21:52:03 2026 GMT
Subject: CN=69e15a04-e237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:f7:db:de:6c:e6:94:e2:f0:0e:9c:af:b6:
7b:f8:a7:c5:85:7a:08:2a:02:ae:75:e1:f4:4d:67:
da:3a:3f:1b:c4:e0:6b:d4:00:75:3f:be:6e:30:e0:
e1:3e:56:19:0e:63:f8:e8:09:c3:db:39:30:91:6f:
fa:cf:45:a1:6b:be:5c:ab:fa:37:f2:e3:10:d2:2f:
08:d1:56:93:1c:ab:05:8c:26:d0:90:ce:73:fc:e2:
5c:4c:67:69:00:63:3b:04:77:5a:18:8d:97:cf:fb:
5f:c3:84:ca:82:78:35:68:ec:90:bd:e4:88:fb:2c:
52:2c:1e:6f:8d:57:b3:0a:45:e7:81:f2:1f:48:75:
75:cf:48:86:82:2d:f9:97:cd:56:31:3a:76:e5:9c:
0c:a7:cb:ec:79:c2:3e:66:e7:6a:46:22:79:cb:98:
07:c4:4b:94:bb:6e:e6:93:cd:86:ca:c6:10:f8:fb:
72:56:ff:59:d7:5a:f9:5c:c4:72:7d:0f:47:3a:49:
8d:ae:3a:d8:63:ef:a8:23:48:47:62:cd:06:cc:c3:
b0:17:0d:b9:47:b7:97:de:bc:44:04:b6:f1:b7:0c:
45:4f:52:26:59:4f:7c:1d:fa:7c:5e:59:e5:a3:8e:
7f:db:e0:04:2b:79:1d:98:85:f6:7d:7e:c8:88:b5:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:59:D4:3A:8E:95:32:FE:39:08:3B:9F:C5:7C:40:3A:1A:61:95:D0
X509v3 Authority Key Identifier:
keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:bb:f0:ab:b6:b2:d4:a5:5c:5d:7b:4b:48:3c:ce:e9:e4:e5:
2f:6c:df:63:83:74:5f:4e:df:f2:99:3f:cc:7e:d0:2c:8d:9f:
03:5d:ed:8f:84:97:26:77:77:0e:85:2c:fb:23:b0:ab:d1:39:
26:d0:48:16:ea:27:0f:dc:3b:ca:98:59:cb:c2:cc:6c:88:da:
a7:d6:90:26:03:cf:e1:c1:36:e6:50:39:34:9e:65:a8:0d:6a:
2e:a1:71:52:9d:22:60:aa:bd:5a:0b:7f:0c:e2:70:f9:fd:2d:
10:b7:19:09:d3:17:bf:9c:c6:a4:6e:fd:90:ad:29:a7:4a:26:
e3:99:cb:e9:44:1a:cf:8b:83:d2:8f:a1:7c:19:f4:ce:f4:4e:
02:2d:b7:7f:00:11:95:03:69:ea:00:8e:79:83:e7:b9:0e:7e:
fc:62:13:16:9b:73:e1:c1:8b:ee:66:c0:4e:f8:38:d2:94:83:
f0:6f:da:32:a7:09:c6:19:2d:a7:59:e2:9a:ad:fd:7f:f6:40:
67:c9:10:d9:dd:7e:13:45:6e:9e:7e:c7:47:f0:9c:2a:15:a4:
76:da:d9:1f:a8:9c:9a:59:42:28:9d:96:03:f4:79:ff:0d:38:
7b:15:72:c3:24:62:6c:dd:94:b2:8a:22:8b:b3:14:d1:cb:2e:
f5:22:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:35 2026 by rpki-client